Information sheet on the new data protection law in inpatient care for patients


Dear Sir or Madam,

In accordance with the General Data Protection Regulation (GDPR), we are obliged from 25 May 2018 to provide you with certain information when collecting your personal data.

Name and contact details of the person responsible:
Mr E. Spitkowski -
Managing Director of PAN Klinik am Neumarkt Betriebsgesellschaft mbH
Zeppelinstr. 1
50667 Cologne
e-mail: info@pan-klinik.de                                                                           

Contact details of the data protection officer:
Dr Andreas Pinheiro
e-mail: info@ap-datenschutz.de

Purposes and legal bases of data processing:
The basis for treatment is the treatment contract, which can also be concluded informally. We can only fulfil this contract properly if we process your data, for example by recording your insurance data. The primary purpose of data processing is therefore to fulfil the treatment contract. In addition, there is a legal obligation to process your data. Doctors and other medical staff must keep a patient file in paper or electronic form for the purpose of documentation in direct temporal connection with the treatment. All measures and their results that are essential for the current and future treatment of patients from a professional point of view must be recorded there. Data processing therefore also serves the purpose of fulfilling this obligation. This data is processed exclusively or under the responsibility of persons who are subject to a duty of confidentiality under criminal law.

Patient data is also processed for the purpose of passing it on to specified recipients as required by law (e.g. to the referring/referring specialist, to associations of statutory health insurance physicians, to the Medical Service of the health insurance funds). We also receive information from third parties, for example from your health insurance company or other practitioners on the basis of statutory regulations or your consent, which we store in the treatment documentation in order to implement the treatment contract and to fulfil our statutory documentation obligations.

In cases where data processing is not required to fulfil the treatment contract or is not based on a legal obligation, data processing will usually be based on your consent.

Recipients or categories of recipients of personal data:
Due to legal regulations, it is possible that we may pass on data to the following recipients/categories of recipients:

  • Health and health insurance companies and subsidy offices
  • North Rhine Medical Association
  • North Rhine Association of Statutory Health Insurance Physicians

In addition, we may pass on data with the consent of the data subjects. When you give your consent, we will inform you of the specific recipients involved.

Duration or criteria for determining the duration of data storage:Personal data of patients must be stored by law for a period of ten years after completion of treatment. In special cases, the retention period may be longer than required by law, e.g. for the enforcement of claims for damages, insurance and pension claims by the patient, insofar as we are aware of this. The patient's state of health may also make it necessary to store the data for longer than the statutory periods. As the patient's civil claims for damages against their practitioner only become time-barred after 30 years, we reserve the right to retain the patient file for a period of 30 years plus one day.

You can lodge a complaint regarding data processing with the competent supervisory authority. The supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf.

Consequences of non-consent
Unfortunately, we cannot guarantee complete care if you do not give your consent; this is also stipulated by law. In this case, for example, we cannot pass on any data to specialists from other fields. You may have to organise this yourself. Electronic transmission will also not be possible in this case, as this requires your consent.

Detailed patient information in accordance with GDPR
For more detailed information, please refer to the information sheet "Detailed patient information in accordance with GDPR", which is available at the respective receptions or alternatively on the Internet at https://www.pan-klinik.de/Patienteninformationen/  and via the QR code.

If you have any questions about data protection and your rights, you can contact the data protection officer Dr Pinheiro at info@ap-datenschutz.de.